Default Port Search
Jellyfin listens on 8096, Plex on 32400, and Portainer on... two of them? Search by app name or by port number and keep this open while you wire up Docker.
| Service | Port | Protocol |
|---|
Default container ports for the most common self-hosted apps — the host port you expose can be anything, and a few apps (Nextcloud, qBittorrent, Vaultwarden) ship with different defaults depending on the image, so always check the docs of the image you pull.
Two habits to build with this list
First: write down which host port maps to which service as you build. A stack with Jellyfin on 8096, Sonarr on 8989 and Immich on 2283 is easy to manage — until you add a service that wants the same port and you have to hunt down the conflict. Second: databases (PostgreSQL 5432, MySQL 3306, Redis 6379, MongoDB 27017) should stay reachable only on your LAN or the internal Docker network, never forwarded on your router.
In general, the fewer ports your router forwards to the internet, the smaller your attack surface. The modern answer is to forward none: put everything behind a reverse proxy with HTTPS for the services that must be public, and reach the rest through a VPN like WireGuard or Tailscale — the guide below shows the exact setup.